Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:54

General

  • Target

    270f2578785175bec2c78195b9a3dafe.html

  • Size

    30KB

  • MD5

    270f2578785175bec2c78195b9a3dafe

  • SHA1

    68df14f86e4760855b19e86a5ab72a4cf44484c5

  • SHA256

    6e7a3be0c8395dcebf098ac18b536bf6f215ba2137d7aa5d62f1f630d065ed45

  • SHA512

    7841995a3c553aa6830541b11e2d23ffa14ca244cfce49ea082a389d0489b56049a0f76699d0ad9a558fbfa8e1d96e72a6338e80d992f580aca52e65b6ec7664

  • SSDEEP

    384:7E4sau+xiIxitxitxitxitxiXxiXxiXxiXxiyxiyxiyxiyxiYxiYxibxil44444e:txua44444qqq/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 20 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\270f2578785175bec2c78195b9a3dafe.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2464
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2464 CREDAT:275457 /prefetch:2
      2⤵
        PID:2676

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      31b38f94e83ee4fa49c2f44f54d152db

      SHA1

      bf2453573a476af7dc18e5c3de5cecad6a2578b9

      SHA256

      b90b82fbf0e910bb761c376f35665aff146ab9a356c3a4ee487ee355ac9254b7

      SHA512

      e6d1ceb9f481a433850fc9b54a7a723b6428b63335b50e8256fae9a911f892dbc1770f52147dc22e1943fa6ba6eb6674d4934c15810928437b634535457b033a

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      f86f01bd8bf3e051bb1b64a4a80317bd

      SHA1

      d192898fd174b0ebe4090d165691ac8f078789db

      SHA256

      9a9c6f8856da555135263bd3adab2d600ad8d8a7a559a9a982e5c74388f18ab4

      SHA512

      dafdaf795a1a40cc4faf9565c7119b67b5eb0fed848510edd5490523a7e23625edf29e265b5a3d36b2e8c925c818dc9ade2c4a48d4af7d8b510562da2a0984b9

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      14e964071e9d017d911c82e1315642df

      SHA1

      ab314fdd43bdd9122deb5e330a7c0986bc2a4d10

      SHA256

      b4e5ee6f46076600101ae057ea7d81c8be0fa75150b39e667af3125e6a0eb1fd

      SHA512

      6eff573cdd6eaed09e53dfc832f0331739c4c46fa483ad1f6e2b41e18c1e8d832cca9bf7edf3ab5b44e554015f322c1a3e373684673bb37f30e054c769df4979

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      e20e836a9d068ed0cfc1660d85ca8ecb

      SHA1

      cd69d3f771ac69a19dbf7bfc68f10093c040a410

      SHA256

      498b9a0bd6aa9b97937d3c0dfc6231280bc044e587f32bae85c6407eb2d79f2e

      SHA512

      c2bdbdfccd064813e78a8585cbe4ec53adab0b89fc71eee732bbe1be38259fcf3b6ed9c5fc906d1aa41143c9c93a0f7593fa84c3a4ce1a02933e8957ec42f812

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      002c9dfb4e1e02d6f7331fa59a0e4799

      SHA1

      bf6d6c771faa8300921c746b0f18150cfe2e7bf5

      SHA256

      568cd8e92b638a574df5a0dace6996818045f8b0c9b052f70585df005990eac6

      SHA512

      c7262f656423ceace97240cfc6db32a4962167f9f82538770184b698d539ef5757501f46b8bdc0efa44e57d4702c8279a2088725284bd06a1751665f42a563b2

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      842e88ef97a816333613495c6fa30ab0

      SHA1

      ab30a663589217de0e9a38f2654ef5e0457081aa

      SHA256

      8cc15b759eb2e28c379f9759bab0e56731608864c2ca0ebb27aa63d9093bdb94

      SHA512

      5a224a2c91dea9e8add27840068ebe2344998a5a94e05dd2cc0371f5d5040f43c28616d0a893f7a3587d67dfb65743d0e70134d0a2246a33be7f7fc700f4f237

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      f4b407ef1d582eb2be3f3deb4e8ba85c

      SHA1

      0044bb109d1c6ce91989ac099f9a2fd12c13b1da

      SHA256

      885ae7b55bcfa781a53a98895cb5cfdef00cbe777cd758b53d31b48ecdce87f9

      SHA512

      df82838f79b3c6b603a91b843050ec111bd7a5dc3fb1ad62ee29058825afea7116a4fa79822c13be124fbfae0718e78cd278f68a8569f5588d620858a0a448e2

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      30fe6bc0b2e1d0bc9f84342e542def21

      SHA1

      1d15c95dc9507713139e8b9e192558306ad570e0

      SHA256

      2c6525c25b224c902503674f7fdb5ab00ebf09369ff3230ad9f5be9c3cf0b8e3

      SHA512

      f070d1849ab2b0fe583a6c93aa6d9e81ea72386bde2dc561c6327a30aa594d2f5b670cd8aa70ac0f88bea8cef5b5380226b2274ee9dba4e9702f829500b6114e

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      129091a19a96208105964f93534038d7

      SHA1

      05348709b3140e1f29b7da99d4bfc02dd81fe7d9

      SHA256

      794fddeb75617068398f3103d8398d6fd890a3e916f02711a33c5d993b1c6af2

      SHA512

      c2754a2cb5568128638895ce71949ce042c36ebac854ec56259df811c2ba88c2331ebe6c5623dd35ca5de2e7bf7bd0384b737346abd05d81b7640c850d8b989f

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      49dd124782875b1b7225f7f609e3fba7

      SHA1

      c85c6c69b423ce65261f942a769aef83513e30a8

      SHA256

      89724820cd41e23fe2f0f4aa8275f11bfa151928a690c4805d897d65c3366eb1

      SHA512

      0ed86f957e746d2c3be1da76f71767a556e2545df6476eb74768552abdcd7430cdb8965bfc45a2d4310229f7afdea3818836594050aec2dbeed598db4ae4f47b

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      91876d801cd355a4171c8aa48eaade60

      SHA1

      1dcb04bf6ca10dce59fa80fb077e13ff1b3001a0

      SHA256

      10093c4909cd90b4fca6d7dd253517cef23b7485bd339a35878a74ed00eb5ee2

      SHA512

      a63a2cb534fd4da2d1ffb6c996bbbc4ec8b910fbf8d5103043558ab3cd9156dc961faeb46dc2cc26f9376276862eb31aab671fe9eb24e140fed28ab3a2cafe37

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      bcd3ad85f1b8d55862eb5a33b7a55a16

      SHA1

      b638b7e7ac27593c438df4c0cdbded961f4d2995

      SHA256

      435dd94990af79f4b3f623eda8cc257dcc29168b3238559a4f3e334bee2d6447

      SHA512

      373d24d90242ad5e75604689d59f447d24f7fc13aba6e7a8703cbba7a616eb37a208b98af05dec35224ac4db01673bbd65dea3c209458f356f171df05869c3c1

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      362d9e7c8753211a4ead9bd2d720ef96

      SHA1

      7273cf6adac9255f874c3131674a7797e0baed2f

      SHA256

      5e517f4174237910dedfecf2b8fd5a4815dc1f2346790f83476fe75a61ecabdb

      SHA512

      ae0553551489b60356afe60eb951062f19cc0413af4f39a3d93e4b2935e2d36a5e74cff13b25ce1efd3a526151762301e4400f13a97ef7629f37ad360a936ffd

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      00778dd75778d3ecfda607b61ce1555c

      SHA1

      75fd23ce8953d8585b26c0600c922ce3ff47549f

      SHA256

      c12a58d04cae227fe148857bddad5e6ddaff444201e7572bc592d6a6706f3b5d

      SHA512

      61437d7868b326c700ffba23c9c56f5393f2a2824257f9f1d84392a6a0b67ad6a94dc3808bfecbadedbe66ac07f0601ae99eb1eac37079248248dbcb7da97c5f

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      1b7a09b8651f7889fbf55a2ee059e7c9

      SHA1

      7eb9f85aed309905235ad26a69f3dd173659ad2b

      SHA256

      8108ef68e08c156837c26c03a4abfe27771a33e764de76822e0bc125f0de9c70

      SHA512

      aaad2b948ea78c53bcef22eaf01f80bda6c8b89856143a342ad679607b261142e8b4e5270230416d13cb418a6b4eeca689982165c7261b5705ef62a32679055e

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      f3fb6629ef88ded1a4ba13ae0b02c37c

      SHA1

      7699922edf9ab85cea9707ab5eb2ee98421fb6a6

      SHA256

      43fe70289d0e73bce8a75b05e79112cb61a067a18065eb3080eeae2db3a949c9

      SHA512

      cdea9c175e991c60637a9bcb8530f293a985649269e11fd3845b700d20240c120922af87978d7c96594faae0e0f4ad71b6482259a1b4a72997ec96deb703bb6d

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      ae1579c024080e8ba995b755bc43f957

      SHA1

      6729d10896f35360a67cc92c346300bbccfc8f38

      SHA256

      537d5e9b988ced4e7dd242b99d797be374ac5375268857e0741a159c03099ff0

      SHA512

      3682f3f4376636e6efd7b2a39a08c0a5c48c4a8dfc1a6053f57347c7c6c01b35ce0b6b306b2832e0a3a5b5a08a162b1aceb1a56c79b1f9b054663a15a77777f6

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      aaec3f0c2faaf062eae6a708889de8a5

      SHA1

      ad0562b996eade9fac13da5aa06a8c9f8e4ab956

      SHA256

      4a729a745629509a82a0d0143e97fd1def1d7d48c9a97611d429411d6ff5b0ba

      SHA512

      4b5c39783d0632313fafeef2d43cf3b538ccbc03c9e29a578a6b3906e280363ecead482779a66a10a60875f34c34a0efa363c36787b0b3f627ad5e13edf99dab

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      3a9ac218bac3beb3c2371520556446e7

      SHA1

      39aec4a49325a35da75a465760ba31bf03831051

      SHA256

      2f6c72086888c5eba93cf57c8be91fc038e4a3b1e9a84481e8974af784db92fb

      SHA512

      a7fa6d9e3c05dbdd1d3ca2906c1e7a4b593d909dff6ffd163c276b2b72424a254b3e1f5226f8635ebd0dfb9a8436c8ec34a3f8d5fb7c65ae9e9e20933cff9041

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      3e0b138c18783aceb63c89e87a6d7d30

      SHA1

      2021fdc4e68a3fa3fe71a30ca2304b3606d41eb9

      SHA256

      8d39fd886cd003bb61c3128426c07ee6d5bf72b523aaa56ed1bf76fe9e5ef86d

      SHA512

      6f8e28d659b5b9262959684107530a03ba70f50f740eaae9f60dd9000ec4d426157bc1cf5a1d28a29b611e63eb8770f147b0f458fb229f2e120fe28997a6e90e

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      b5a27cc243a8b87f5f48dd1f346d846d

      SHA1

      0d8e09e283b472819c420e977df6d83b3f014395

      SHA256

      ffa3f2f9a6e4390418b639ff997c494a2c468eb195acd0cc4f8cbc832415c49b

      SHA512

      bac36cb191928775c4d9f94a95b200b70613aa090214a35e107e967b569941daed0c0af2b333659117ee71dcf6c50275db8acabce6056c1d7f187a4e858c3fbd

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      639b0ded882a54023af4e9f0fa1138c5

      SHA1

      333789abbc2fe20f2e877139e334b9799589f727

      SHA256

      5ad4b4758046091db8b7f239a19afe11a1945da6022e8a39ff60fea8cba62664

      SHA512

      109ce1c5caa8d99fac1c2d1464e5af56edf790629412aa0993659f51f48e091713f627c5cad04fb35f01d20015d31c32eff5cde0ab2fb2a3ea92aa93feb48abc

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      512dc8ecd7e10df1bf8c815bd594b02d

      SHA1

      c46a5bf1f399e8f304cc5ec8b1ea0c7e79ba2e99

      SHA256

      757091bed80faed3ab7c451c6d5d69d03b3087a8a7c85ca162fcfff56607e29e

      SHA512

      dc5d836b3fa02050110d6f76a3dfc05ff88368d89db724873c11fc956facee968e804cf647b4660e3e9255ebbe4f79d2d007f16a505de84bc2895c0408309c6f

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      25bdf144c7828cb010d2f062c87bb495

      SHA1

      dd2e73482eeb192177f8030de2089b2ea8f92a70

      SHA256

      f8fe19e514e0801fe8a044f77dd8353e958585d21d16773cd92e859d5f54a2c2

      SHA512

      9d731e28266a0bfb0cb7a4ad317a1d1c90eebe5416f94ca9a7f46bda4ab729178c9411939059a669fa525e2e0df154c9f951527db6493a1dc78f76649c063ed6

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      5c94e98129d72991bac8152f37b4ece7

      SHA1

      f88265eb3ff0af01dfb2535b330a7c96c596edc4

      SHA256

      99700aac97a4daa7bd6a263e7df000061ed0d815da7e3d610281d304bdd44651

      SHA512

      2bcd379274f8c1a2ce58c2cc794eebef75182846e33a5ba5b053a53e0568fa613d204e973ae0c53a715a5e9ff6736a1a409220be9104f7fb0e500df12feb9c70

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\dnserrordiagoff[1]

      Filesize

      1KB

      MD5

      47f581b112d58eda23ea8b2e08cf0ff0

      SHA1

      6ec1df5eaec1439573aef0fb96dabfc953305e5b

      SHA256

      b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

      SHA512

      187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R1EBDLS6\httpErrorPagesScripts[1]

      Filesize

      6KB

      MD5

      44917a5c34efb4dcbb5022aca37d237d

      SHA1

      26127e52c26197549cb0a6c431c4cbde2692055c

      SHA256

      b9873638a4f82314b6a29c956977faecd1a23a2f30d141f33dba6e1eb3ba289c

      SHA512

      b0e4ad80efb11bfa73111fdf1af65ad60f58bb787cba312f5a1791ba513d827304e99880b3a58331b7fba127cad528c0e3953cdc3efab6e326fabbdf239ad1ae

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\errorPageStrings[1]

      Filesize

      2KB

      MD5

      e3e4a98353f119b80b323302f26b78fa

      SHA1

      20ee35a370cdd3a8a7d04b506410300fd0a6a864

      SHA256

      9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

      SHA512

      d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

    • C:\Users\Admin\AppData\Local\Temp\Cab607A.tmp

      Filesize

      45KB

      MD5

      dc38d629e51926a750b443772d7c8c65

      SHA1

      2868765523e76b2e6706f18ecb665f4631a00d00

      SHA256

      21a98ea45d4ca76fc03cd769b01345da379395b41295e1506644149d0a378883

      SHA512

      beb8198332e8771a0475a925a4b31a8a80df9a04dc889442d1a4e024b1b66709acc3e347d50af1868d5d0c351d489cd454fc2523f752ea9dec56b9a9d6048ef4

    • C:\Users\Admin\AppData\Local\Temp\Tar609C.tmp

      Filesize

      91KB

      MD5

      0ef0f918d07eea1b0f5bb9f0f8964d3c

      SHA1

      124d4932e0bb3d0c3668ba6198473e0c5dadf29d

      SHA256

      62f6fac3aef51e8d1642006dd4a47e42e63366aa0b4878648eaee764be25a049

      SHA512

      c4887b87fc84b1906024129e2b9abdf199825df9a89d4a333137021892a1d391ddf1bb228172ca34bd159fb4decdb887a644d3f62ae3b6a5f0a85f4d8b80fcf1